RecycleBin

Recycle Bin DataAndInfo

Compound
5 paths from 2 artifacts
Version 2
Mark Hallman / Joshua Hickman

Paths on disk

5 paths from 2 targets

Includes 2 targets

Each one is collected with this target

RecycleBin_InfoFiles2 paths
RecycleBin_DataFiles3 paths

Collect it

KAPE command line for RecycleBin

Source

Destination

--vss--vhdx

kape.exe --tsource C: --tdest D:\Evidence --target RecycleBin

Note: This is a compound target that references 2 other targets. The KAPE command resolves them natively; the PowerShell/Batch/WSL scripts flatten every referenced path into explicit copy commands.

Run with administrator privileges. KAPE Documentation